Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #2

BlackX UEFI Bootkit Targets Central Asian Diplomatic Agencies

Original: (securelist.com) BlackX UEFI Bootkit: A Resurgence of Secure Boot Exploits in APT Campaigns Targeting Central Asia In br

Kaspersky researchers at Securelist have detailed BlackX, a newly discovered UEFI bootkit that bypasses Secure Boot protections in attacks on diplomatic agencies across Central Asia. The implant resides in firmware, persisting below the operating system and making detection difficult. Analysts link the tooling to an APT campaign and describe it as a resurgence of Secure Boot exploits in state-aligned espionage operations in the region.

Why now: Firmware-level malware that defeats Secure Boot raises concerns about a renewed APT espionage campaign in Central Asia.

KasperskySecurelistBlackX bootkitCentral Asia

Open on mastodon →

Evidence

• (securelist.com) BlackX UEFI Bootkit: A Resurgence of Secure Boot Exploits in APT Campaigns Targeting Central Asia In brief - This article describes the discovery of BlackX, a UEFI bootkit used in an APT campaign targeting diplomatic agencies in Central Asia, which is… · orlysec@swecyb.com · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/3210710